This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft File: 8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json) Hash identifier: trGAnxvyQ5bT9xFhiZ58lP6MbqxxAjJOZIqw17fiRPc= Subject key identifier: FB:A5:84:71:0E:75:D9:52:04:12:62:56:62:67:4F:ED:A4:50:84:5D Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5 Certificate issuer: /CN=f16b28416ddbf39fb24b0996686acface76c98d5 Certificate serial: 019B2F9E00C46B45F09EA3D08A28C40D3391 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 04:00:42 +0000 Manifest this update: Thu 18 Dec 2025 04:00:42 +0000 Manifest next update: Fri 19 Dec 2025 04:00:42 +0000 Files and hashes: 1: 6uJHb0n-o1Jmt4WfrkKYtugW_tA.roa (hash: oripnuB9VSq+/2+WmWeFeymLsX3aSd+Xhezj6MQbB30=) 2: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: 14hcXLzvAqAZnIxO1v2iTFvjujELQ6FIeJIPMB8FRGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:00:c4:6b:45:f0:9e:a3:d0:8a:28:c4:0d:33:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5 Validity Not Before: Dec 18 04:00:42 2025 GMT Not After : Dec 19 04:00:42 2025 GMT Subject: CN=fba584710e75d9520412625662674feda450845d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:f9:ee:e9:cf:84:99:c9:00:e4:49:69:be: c4:0f:04:ee:b8:9c:72:cf:b4:58:eb:06:24:e2:6f: a8:c4:c6:3c:c9:de:d6:1a:d5:09:b0:8f:1d:34:9a: 5b:cd:07:56:83:8d:52:82:73:df:a0:a3:3b:29:ed: 5f:71:f0:33:56:43:f0:2c:c6:7e:b6:03:74:a6:0e: c2:32:ca:3e:88:17:4f:e6:f4:37:92:82:d4:3a:3d: 0f:c4:33:89:b1:f6:33:08:3e:4a:74:f1:2a:fe:fd: 76:ac:a6:9d:96:97:44:f1:0b:fb:be:15:83:13:6d: 82:76:23:86:3c:54:ed:a2:93:e2:62:ab:b1:70:18: a6:2f:47:f1:56:d3:e7:38:45:6c:96:3d:0a:17:70: fc:18:61:5a:b1:ec:2d:9f:48:c1:b9:f2:76:31:5c: 67:9b:db:95:6c:e6:b8:70:48:63:51:03:5e:d8:e1: 37:ef:00:8c:ab:5c:ab:22:30:32:aa:a3:6b:82:98: 9d:98:9b:01:2b:28:42:10:a7:60:f1:35:24:7d:84: 44:a1:ab:a0:c2:ac:46:e2:af:99:08:cf:cf:0c:27: 0e:9e:b4:dc:cf:44:a9:2e:64:e3:2b:c6:3a:45:57: 87:80:47:14:17:c7:59:07:79:ee:33:9a:7e:59:e1: ca:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A5:84:71:0E:75:D9:52:04:12:62:56:62:67:4F:ED:A4:50:84:5D X509v3 Authority Key Identifier: keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:da:7e:13:03:9d:10:6a:ab:30:40:92:44:4e:04:66:6f:d3: 96:0b:8c:f3:97:20:e3:b2:5f:ef:48:89:53:11:75:59:ff:ed: 7f:99:32:d5:31:54:a8:44:a1:53:78:7d:cc:db:11:8f:ee:09: 01:5c:3f:fb:f1:4d:e7:bd:19:20:53:f8:5a:a7:b4:88:1b:9f: c1:e5:2a:47:fb:41:8e:cc:74:22:e1:a9:e5:57:8c:74:53:7e: 85:69:81:19:64:e1:5c:0c:c9:84:b4:4b:0c:b0:a8:26:d5:ab: 32:51:d5:50:06:54:01:58:90:6c:21:0b:05:b4:50:4a:6b:05: 31:0c:ad:03:5e:1a:e7:88:d3:07:e1:14:dc:ab:18:48:ad:c3: 14:a4:56:38:22:3b:30:21:f4:9d:96:39:69:6b:d3:c5:f4:81: 22:83:86:c9:12:24:96:74:48:d9:5f:f2:68:77:f1:09:0f:6b: fc:45:91:99:ed:ca:b0:4e:ee:c3:11:39:c4:c8:2f:4a:1f:4b: 41:b0:69:ab:e4:49:ff:90:ce:1d:ef:a6:0b:a4:27:2d:31:6e: ba:23:04:7a:d5:2e:1d:96:a3:f3:e6:8f:95:72:9b:1f:95:21: dd:c9:fe:05:90:bc:4f:89:fb:af:4c:9d:c0:cf:d3:f5:52:bd: cb:f7:6c:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvngDEa0XwnqPQiijEDTORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNmIyODQxNmRkYmYzOWZiMjRiMDk5NjY4NmFjZmFjZTc2 Yzk4ZDUwHhcNMjUxMjE4MDQwMDQyWhcNMjUxMjE5MDQwMDQyWjAzMTEwLwYDVQQD EyhmYmE1ODQ3MTBlNzVkOTUyMDQxMjYyNTY2MjY3NGZlZGE0NTA4NDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx357unPhJnJAORJab7EDwTuuJxy z7RY6wYk4m+oxMY8yd7WGtUJsI8dNJpbzQdWg41SgnPfoKM7Ke1fcfAzVkPwLMZ+ tgN0pg7CMso+iBdP5vQ3koLUOj0PxDOJsfYzCD5KdPEq/v12rKadlpdE8Qv7vhWD E22CdiOGPFTtopPiYquxcBimL0fxVtPnOEVslj0KF3D8GGFasewtn0jBufJ2MVxn m9uVbOa4cEhjUQNe2OE37wCMq1yrIjAyqqNrgpidmJsBKyhCEKdg8TUkfYREoaug wqxG4q+ZCM/PDCcOnrTcz0SpLmTjK8Y6RVeHgEcUF8dZB3nuM5p+WeHKrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPulhHEOddlSBBJiVmJnT+2kUIRdMB8GA1UdIwQY MBaAFPFrKEFt2/OfsksJlmhqz6znbJjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iMTY1Y2EtMmYzMy00ZThlLWE4OTYt Y2RhYTU4MTUxOGYzLzEvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9iMTY1Y2EtMmYzMy00ZThlLWE4OTYtY2RhYTU4MTUxOGYz LzEvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNp+EwOd EGqrMECSRE4EZm/TlguM85cg47Jf70iJUxF1Wf/tf5ky1TFUqEShU3h9zNsRj+4J AVw/+/FN570ZIFP4Wqe0iBufweUqR/tBjsx0IuGp5VeMdFN+hWmBGWThXAzJhLRL DLCoJtWrMlHVUAZUAViQbCELBbRQSmsFMQytA14a54jTB+EU3KsYSK3DFKRWOCI7 MCH0nZY5aWvTxfSBIoOGyRIklnRI2V/yaHfxCQ9r/EWRme3KsE7uwxE5xMgvSh9L QbBpq+RJ/5DOHe+mC6QnLTFuuiMEetUuHZaj8+aPlXKbH5Uh3cn+BZC8T4n7r0yd wM/T9VK9y/dsbA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:51:56 2025 by rpki-client